Hi,

I'm going to give an example about CAS login in differents hosts. I hope
that it help you.

IN THE CAS SERVER

  - Create the certificate with keytool, you can use something like
  that:

$JAVA_HOME/bin/keytool -delete -alias tomcat -keypass changeit
$JAVA_HOME/bin/keytool -genkey -alias tomcat -keypass changeit -keyalg RSA
$JAVA_HOME/bin/keytool -export -alias tomcat -keypass changeit  -file
server.crt
$JAVA_HOME/bin/keytool -import -file server.crt -keypass changeit -keystore
$JAVA_HOME/jre/lib/security/cacerts (as ROOT)
$JAVA_HOME/bin/keytool -import -file server.crt -keypass changeit

IN THE CLIENTE SERVER (different to CAS SERVER)

  - Dowload the java file from:
  http://blogs.sun.com/andreas/entry/no_more_unable_to_find
  - Compile the java file with javac ./InstallCert.java
  - Use the java class to import the certificated from the CAS SERVER
  with: java InstallCert Hostname_of_casserver
  - the previous command creates a file called jssecacerts
  - Now, you can define in the JAVA_OPTS the truststore before to start
  the server with:
     - export JAVA_OPTS=" -
     Djavax.net.ssl.trustStore=/path/to/jssecacerts"


--
Edwin Miguel Triana Gómez
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to